Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory situations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-mailUpgrade seamonkeyUpgrade xulrunner-devel-unstableUpgrade xulrunnerUpgrade seamonkey-nspr-develUpgrade firefoxUpgrade seamonkey-chatUpgrade seamonkey-develUpgrade seamonkey-nssUpgrade seamonkey-nss-develUpgrade thunderbirdUpgrade xulrunner-develUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nsprUpgrade seamonkey-js-debugger | Dec 1, 2016 | Feb 22, 2010 |
| Freebsd | — | Upgrade linux-firefox-develUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade thunderbird | Dec 10, 2025 | Feb 18, 2010 |
| Gentoo Linux | — | Upgrade net-libs/xulrunner.Upgrade net-libs/xulrunner-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade mail-client/mozilla-thunderbird.Upgrade mail-client/thunderbird.Upgrade www-client/seamonkey.Upgrade www-client/seamonkey-bin.Upgrade dev-libs/nss.Upgrade www-client/icecat. | Oct 30, 2017 | Feb 22, 2010 |
| Mfsa2010 03 | — | Upgrade to Mozilla Firefox version 3.6Upgrade to Mozilla Firefox version 3.5.8Upgrade to Mozilla Firefox version 3.0.18 | Jun 14, 2012 | Feb 22, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.0.3 | Feb 3, 2012 | Feb 22, 2010 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 3.0.2 | Feb 22, 2012 | Feb 22, 2010 |
| Oracle_linux | — | Upgrade firefoxUpgrade xulrunner-develUpgrade xulrunner-devel-unstableUpgrade xulrunner | Oct 16, 2024 | Feb 21, 2010 |
| Suse | — | Upgrade orbit2Upgrade mozilla-xulrunner190-translationsUpgrade MozillaFirefox-develUpgrade orbit2-x86Upgrade mozilla-nssUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade orbit2-32bitUpgrade mozilla-xulrunner191Upgrade mozilla-nss-toolsUpgrade libidlUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-develUpgrade libidl-x86Upgrade mozilla-xulrunner191-gnomevfsUpgrade gconf2-32bitUpgrade libfreebl3-x86Upgrade mozilla-xulrunner191-32bitUpgrade gconf2Upgrade mozilla-xulrunner192-x86Upgrade mozilla-xulrunner190-gnomevfsUpgrade MozillaFirefoxUpgrade MozillaFirefox-branding-SLEDUpgrade mozilla-xulrunner192-gnomeUpgrade libfreebl3-32bitUpgrade mozilla-nspr-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-xulrunner192-translationsUpgrade mozilla-xulrunner191-translationsUpgrade mozilla-xulrunner190Upgrade mozilla-xulrunner191-x86Upgrade mozilla-nss-x86Upgrade mozilla-nspr-x86Upgrade gconf2-x86Upgrade mozilla-xulrunner190-x86Upgrade mozilla-xulrunner192Upgrade libidl-32bitUpgrade mozilla-nsprUpgrade mozilla-xulrunner192-32bitUpgrade mozilla-xulrunner190-32bitUpgrade libfreebl3Upgrade MozillaFirefox-translations | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade firefox-3.0Upgrade firefox-3.5Upgrade abrowserUpgrade xulrunner-1.9.1Upgrade xulrunner-1.9 | Nov 8, 2024 | Feb 22, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub